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Art. 34 AMENDMENTS 

I 1 

Claims 

5 1. (Amended) An unauthorized-alteration detecting method 
comprising: 

a step In which a processing section specifies a modulus 
P, an order N which Is an even number equal to or larger than 
2, and a root a, which are parameters of number theoretic 
10 transform; 

a step In which the processing section reads from a storage 
section an original -Image block fi,j(x, y) obtained by 
block- dividing an original Image [f ] to which embedding Is to 
be applied; 

15 a step In which the processing section uses the modulus 

P, the order N, and the root a specified, to apply the number 
theoretic transform to the original -Image block fi,j(x, y) to 
calculate the number -theoretic -transformed block Fi,j(x, y) of 
the original -Image block; 

20 a step In which the processing section determines an 

embedding position (x' , y' ) of a signature Image In each block 
according to a predetermined randomizing function which uses 
Information of a left adjacent block, a right adjacent block, 
or a surrounding predetermined block as a parameter; 

25 a step In which the processing section reads from the 

storage section a pixel value gi,j of the signature Image to be 
embedded; 

a step In which the processing section obtains an Integer 
having the minimum absolute value and satisfying Fi,-j(x' , y' ) + 
30 6 = gi.j (mod e) as an embedding amount 8 In each block from the 
number -theoretic -transformed block Fi,3(x*, y' ) of the 
original -Image block at the embedding position, the pixel value 
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gi,j of the signature Image, and embedding strength e; 

a step In which the processing section adds or subtracts 
the embedding €unount 5 to or from the 
number-theoretic- transformed block Fi,j(x, y) of the 
5 original -Image block, based on (x, y) to obtain the 
number-theoretic-transformed block Hi^jCx, y) of an 
embedding- applied- Image block; 

a step In which the processing section applies Inverse 
number theoretic transform to the number- theoretic- transformed 
10 block Hi,3(x, y) to obtain the embedding -applied- Image block hi, j(x, 
y) ; and 

a step In which the processing section obtains the 
embeddlng-applled-lmage block hi,j(x, y) for each of all (1, j) 
blocks to obtain an embedding -applied Image [hj , and stores It 
15 In the storage section and/or outputs It from an output section 
or an Interface. 

2. (Amended) An unauthorized-alteration detecting method 
comprising : 

20 a step In which a processing section reads from a storage 

section, an Input section, or an Interface an 
embeddlng-applled-lmage block hi,-)(x, y) obtained by 
block -dividing an embedding -applied Image [h] ; 

a step In which the processing section specifies a modulus 

25 P, an order N which Is an even number equal to or larger than 
2, and a root a, which are parameters of number theoretic 
transform; 

a step In which the processing section applies the number 
theoretic transform to the embeddlng-applled-lmage block hi,j(x, 
30 y) to calculate the number- theoretic- transformed block Hi,-j(x, 
y) of the embeddlng-applled-lmage block; 

a step In which the processing section determines an 
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extraction position (x" , y' ) corresponding to an embedding 
position of a signature Image according to a predetermined 
randomizing function whlcli uses Information of a left adjacent 
block, a rlgbt adjacent block, or a surrounding predetermined 
5 block as a parameter; 

a step In which the processing section obtains a remainder 
by dividing the nxamber-theoretic-transf ormed block Hi,-j(x', y' ) 
at the extraction position by embedding strength e to extract 
a pixel value gi,j of the signature image; and 
10 a step in which the processing section obtains the pixel 

value gi.j of the signature image in each of all (1, j) blocks 
to obtain the signature image [g], and stores it in the storage 
section and/or outputs it from a display section, an output 
section, or an Interface. 

15 

3. (Amended) An unauthorized-alteration detecting method 
comprising an embedding process for embedding a signature image 
into an original image and an extraction process for extracting 
the signature image, 
20 wherein the embedding process comprises: 

a step in which a processing section specifies a modulus 
P, an order N which is an even number equal to or larger than 

2, and a root a, which are parameters of number theoretic 
transform; 

25 a step in which the processing section reads from a storage 

section an original -image block fi,j(x, y) obtained by 
block- dividing an original image [f ] to which embedding is to 
be applied; 

a step in which the processing section uses the modulus 
30 P, the order N, and the root a specified, to apply the number 
theoretic transform to the original -image block fi,j(x, y) to 
calculate the number- theoretic -transformed block Fi.^Cx, y) of 
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the original -Image block; 

a step in which the processing section determines an 
embedding position (x" , y' ) of a signature image in each block 
according to a predetermined randomizing function which uses 
5 information of a left adjacent block, a right adjacent block, 
or a surrounding predetermined block as a parameter; 

a step in which the processing section reads from the 
storage section a pixel value gi.^ of the signature image to be 
embedded ; 

10 a step in which the processing section obtains an integer 

having the minimum absolute value and satisfying Pi,j(x*, y' ) + 
8 = 91. j (mod 8) as embedding amount 8 in each block from the 
number-theoretic-transformed block Fi,j(x', y' ) of the 
original -image block at the embedding position, the pixel value 

15 gi.j of the signature image, and embedding strength e; 

a step in which the processing section adds or subtracts 
the embedding cunount 5 to or from the 
number-theoretic-transformed block Fi,j(x, y) of the 
original -image block, based on (x, y) to obtain the 

20 number- theoretic- transformed block Hi,j(x, y) of an 
embedding- applied- image block; 

a step in which the processing section applies inverse 
number theoretic transform to the number-theoretic-transformed 
block Hi, j(x, y) to obtain the embedding -applied- image block hi,j(x, 

25 y) ; and 

a step in which the processing section obtains the 
embedding- applied- image block hi^^Cx, y) for each of all (i, j) 
blocks to obtain an embedding-applied image [h] , and stores it 
in the storage section and/or outputs it from an output section 
30 or an interface, 
and 

the extraction process comprises: 
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a step in which the processing section reads from the 
storage section, the input section, or the interface an 
embedding-applied-image block hi,j(x, y) obtained by 
block- dividing an embedding- applied image [h]; 
5 a step in which the processing section specifies a modulus 

P, an order N which is an even number equal to or larger than 
2, and a root a, which are parameters of number theoretic 
transform; 

a step in which the processing section applies the number 
10 theoretic transform to the embedding -applied- image block hi.j(x, 
y) to calculate the number-theoretic-transformed block Hi,j(x, 
y) of the embedding -applied- image block; 

a step in which the processing section determines an 
extraction position (x' , y" ) corresponding to an embedding 
15 position of a signature image according to a predetermined 
randomizing function which uses information of a left adjacent 
block, a right adjacent block, or a surrounding predetermined 
block as a parameter; 

a step in which the processing section obtains a remainder 
20 by dividing the number-theoretic-transformed block Hi,j(x' , y' ) 
at the extraction position by embedding strength e to extract 
a pixel value gi^j of the signature image; and 

a step in which the processing section obtains the pixel 
value gi,j of the signature image in each of all (i, j) blocks 
25 to obtain the signature image [g], and stores it in the storage 
section and/or outputs it from a display section, the output 
section, or the interface. 

4. An unauthorized- alteration detecting method according to 
30 Claim 1 or 3, further comprising a step in which the processing 
section transmits the modulus P and the embedding- applied image 
[h] , and, if necessary, the order N to an extraction -side 
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apparatus through the output section or the Interface. 

5. An unauthorized- alteration detecting method according to 
Claim 2 or 3, further comprising a step In which the processing 
5 section receives the modulus P , which Is a parameter of the number 
theoretic transform^ and the embedding -applied Image [h] , and. 
If necessary, the order N from a transmission- side apparatus. 

6 . An unauthorized- alteration detecting method according to one 
10 of Claims 1 to 3 , further comprising a step In which the processing 

section obtains the original Image [f] according to the 
embedding -applied Image [h] and the signature Image [g]. 

7 • An unauthorized-alteration detecting method according to one 
15 of Claims 1 to 3, wherein P Is any compound number generated by 

a power of a prime number. 

8 • An unauthorized- alteration detecting method according to one 
of Claims 1 to 3, wherein N Is common to an embedding side and 

20 an extraction side of the signature Image and stored In advance 
In the storage section, or Is transferred from the embedding side 
to the extraction side. 

9 . An unauthorized-alteration detecting method according to one 
25 of Claims 1 to 3 , wherein the processing section selects the order 

N among candidates of the order N, obtained by N|GCD[(pi - 1), 
(P2-I)* **w (Pni-1)] according to a predetermined priority. 

10. An unauthorized-alteration detecting method according to 
30 one of Claims 1 to 3, wherein the processing section calculates 
the root a uniquely determined according to a predetermined 
expression of the Chinese remainder theorem or others, based on 



Art.34 Amendment 



- 7 - 

the modulus P and the order N specified. 

11. An unauthorized-alteration detecting method according to 
one of Claims 1 to 3, wherein 

5 the processing section specifies P expressed by P = 

Pi^^P2^^- . .Pni™» where pi Is a prime number and ri Is a positive 
Integer; 

the processing section selects the order N among positive 

Integers satisfying N|GCD[(pi - 1), (pz - 1) (Pm - Dl, or 

10 reads the order N from the storage section; 

the processing section calculates a root ai,i of the order 
N with respect to the modulus pi; 

the processing section obtains a root aa.i of the order N 
with respect to the modulus pi^^ from ai,i; and 
15 the processing section obtains the root a of the order N 

with respect to the modulus P from a2,i according to the Chinese 
remainder theorem. 

12. An unauthorized-alteration detecting method according to 
20 one of Claims 1 to 3^ wherein the processing section uses P, N, 

and a to execute the number theoretic transform between x(n) and 
X(k) by the following expressions, 

N-l 

X{k) = ^ x{n)a^'' (mod P) (1) 

N-l 

x{n) ^N'^Yl ^Wa^""^ (mod P) (2) 

wherein P Is any compound number generated by a power of a prime 
25 number, a Is a positive Integer, N Is the minimum positive Integer 
satisfying a** = 1 (mod P), 
X = [T]x 
X = [T]*^X 
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[T] is a transformation matrix, and [T]"^ is an inverse 
transformation matrix. 



13* An unauthorized- alteration detecting method according to 
5 one of Claims 1 to 3, wherein the randomizing function uses the 
value of the modulus P and/or a pixel value in an adjacent block 
or a pixel value in a predetermined block which is not changed 
by an embedding process, as a parameter, and determines the 
position uniquely. 

0 

14. An unauthorized- alteration detecting method according to 
one of Claims 1 to 3, wherein the randomizing function is specif ied 
by the following expressions. 



15. (Amended) An unauthorized-alteration detecting progremi 
for making a computer execute each of the following steps, the 
following steps including: 

a step in which a processing section specifies a modulus 
20 P, an order N which is an even number equal to or larger than 

2, and a root a, which are parameters of number theoretic 
transform; 

a step in which the processing section reads from a storage 
section an original -image block fi,j(x, y) obtained by 
25 block- dividing an original image [f ] to which embedding is to 
be applied; 

a step in which the processing section uses the modulus 
P, the order N, and the root a specified, to apply the number 
theoretic transform to the original -image block fi.j(x, y) to 
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calculate the number- theoretic- transformed block Fi,j(x, y) of 
the original- image block; 

a step in which the processing section determines an 
embedding position (x' ^ y* ) of a signature image in each block 
5 according to a predetermined randomizing function which uses 
information of a left adjacent block, a right adjacent block, 
or a surrounding predetermined block as a parameter; 

a step in which the processing section reads from the 
storage section a pixel value gi.j of the signature image to be 
10 embedded; 

a step in which the processing section obtains integer 
having the minimum absolute value and satisfying Fi,-j(x' , y' ) + 
6 = gi,j (mod 8) as an embedding amount 8 in each block from the 
number-theoretic-transformed block Fi,j(x', y*) of the 

15 original -image block at the embedding position, the pixel value 
gi.3 of the signature image, and embedding strength e; 

a step in which the processing section adds or subtracts 
the embedding amount 8 to or from the 
number- theoretic-transformed block Fi,j(x, y) of the 

20 original -image block, based on (x, y) to obtain the 
number- theoretic- transformed block Hi,j(x, y) of an 
embedding- applied- image block; 

a step in which the processing section applies inverse 
number theoretic transform to the number- theoretic- transformed 

25 block Hi, j(x, y) to obtain the embedding-applied- image block hi, j(x, 
y); and 

a step in which the processing section obtains the 
embedding- applied- image block hi,j(x, y) for each of all (i, j) 
blocks to obtain an embedding-applied image [h] , and stores it 
30 in the storage section and/or outputs it from an output section 
or an interface. 
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16. (Amended) An unauthorized- alteration detecting program 
for making a computer execute each of the following steps, the 
following steps including: 

a step in which a processing section reads from a storage 
5 section, an input section, or an interface an 
embedding- applied- image block hi,j(x, y) obtained by 
block-dividing an embedding -applied image [h] ; 

a step in which the processing section specifies a modulus 
P, an order N which is an even number equal to or larger than 

10 2, and a root a, which are parameters of ntimber theoretic 
transform; 

a step in which the processing section applies the number 
theoretic transform to the embedding-applied-image block hi,-j{x, 
y) to calculate the number -theoretic -trans formed block Hi,j(x, 
15 y) of the embedding-applied-image block; 

a step in which the processing section determines an 
extraction position (x' , y' ) corresponding to an embedding 
position of a signature image according to a predetermined 
randomizing function which uses information of a left adjacent 
20 block, a right adjacent block, or a surrounding predetermined 
block as a parameter; 

a step in which the processing section obtains a remainder 
by dividing the number- theoretic- transformed block Hi,j(x* , y' ) 
at the extraction position by embedding strength e to extract 
25 a pixel value gi.j of the signature image; and 

a step in which the processing section obtains the pixel 
value gi^j of the signature image in each of all (i, j) blocks 
to obtain the signature image [g] , and stores it in the storage 
section and/or outputs it from a display section, an output 
30 section, or an interface. 

17. (Amended) An unauthorized- alteration detecting program 
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for making a computer execute an embedding process for embedding 
a signature image into an original image and an extraction process 
for extracting the signature image, 

wherein the embedding process comprises: 
5 a step in which a processing section specifies a modulus 

P, an order N which is an even number equal to or larger than 

2, and a root a, which are parameters of number theoretic 
transform; 

a step in which the processing section reads from a storage 
10 section an original -image block fi,j(x, y) obtained by 
block- dividing an original image [f ] to which embedding is to 
be applied; 

a step in which the processing section uses the modulus 
P, the order and the root a specified, to apply the number 
15 theoretic transform to the original -image block fi,3(x, y) to 
calculate the number-theoretic-transformed block F±^^{x, y) of 
the original -image block; 

a step in which the processing section determines an 
embedding position (x' , y' ) of a signature image in each block 
20 according to a predetermined randomizing function which uses 
information of a left adjacent block, a right adjacent block, 
or a surrounding predetermined block as a parameter; 

a step in which the processing section reads from the 
storage section a pixel value gi.j of the signature image to be 
25 embedded; 

a step in which the processing section obtains an integer 
having the minimum absolute value and satisfying Fi,3(x' , y" ) + 
8 = gi,j (mod e) as embedding amount 8 in each block from the 
number-theoretic-transformed block Fi,j(x', y' ) of the 
30 original -image block at the embedding position, the pixel value 
gi.3 of the signature image, and embedding strength e; 

a step in which the processing section adds or subtracts 
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the embedding amount 8 to or from the 
number- theoretic- transformed block Fi,j(x, y) of the 
original -image block, based on (x, y) to obtain the 
number- theoretic -transformed block Ht.^ix, y) of an 
5 embedding- applied- image block; 

a step in which the processing section applies inverse 
number theoretic transform to the number-theoretic-transformed 
block Hi,3(x, y) to obtain the embeddlng-applled-image block hi. ^(x, 
y); and 

10 a step in which the processing section obtains the 

embeddlng-applled-image block hi,-,(x, y) for each of all (1, j) 
blocks to obtain an embedding -applied image [h], and stores it 
in the storage section and/or outputs it from an output section 
or an interface, 

15 and 

the extraction process comprises: 

a step in which the processing section reads from the 
storage section, the input section, or the Interface an 
embeddlng-applled-image block hi,.j(x, y) obtained by 
20 block- dividing an embedding -applied image [h] ; 

a step in which the processing section specifies a modulus 
P, an order N which is an even number equal to or larger than 

2, and a root a, which are parameters of number theoretic 
transform; 

25 a step in which the processing section applies the number 

theoretic transform to the embeddlng-applled-image block hi,j(x, 
y) to calculate the number- theoretic -transformed block Hi,3(x, 
y) of the embeddlng-applled-image block; 

a step in which the processing section determines an 

30 extraction position (x* , y' ) corresponding to an embedding 
position of a signature image according to a predetermined 
randomizing function which uses information of a left adjacent 
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block, a right adjacent block, or a surrounding predetermined 
block as a parameter; 

a step in which the processing section obtains a remainder 
by dividing the number- theoretic -transformed block Hi,j(x' , y" ) 
5 at the extraction position by embedding strength e to extract 
a pixel value gi.j of the signature image; and 

a step in which the processing section obtains the pixel 
value gi,3 of the signature image in each of all (i, j) blocks 
to obtain the signature image [g], and stores it in the storage 
10 section and/or outputs it from a display section, the output 
section, or the interface. 

18. (Amended) A recording medium having recorded an 
unauthorized-alteration detecting program for making a computer 
15 execute each of the following steps, the following steps 
including : 

a step in which a processing section specifies a modulus 
P, ah order N which is an even number equal to or larger than 

2, and a root a, which are parameters of number theoretic 
20 transform; 

a step in which the processing section reads from a storage 
section an original -image block fi,j(x, y) obtained by 
block -dividing an original image [f 1 to which embedding is to 
be applied; 

25 a step in which the processing section uses the modulus 

P, the order N, and the root a specified, to apply the niimber 
theoretic transform to the original -image block fi,j(x, y) to 
calculate the number- theoretic- transformed block Fi,j(x, y) of 
the original -image block; 

30 a step in which the processing section determines an 

embedding position (x' , y' ) of a signature image in each block 
according to a predetermined randomizing function which uses 
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information of a left adjacent block, a right adjacent block, 
or a surrounding predeteirmined block as a parcuneter; 

a step in which the processing section reads from the 
storage section a pixel value gi,^ of the signature image to be 
5 embedded; 

a step in which the processing section obtains an integer 
having the minimum absolute value and satisfying Fi^jCx' , y' ) + 
6 = gi,j (mod 8) as embedding amount 8 in each block from the 
number-theoretic-transformed block Fi,3(x' , y' ) of the 

10 original -image block at the embedding position, the pixel value 
gi,j of the signature image, and embedding strength e; 

a step in which the processing section adds or subtracts 
the embedding eimount 6 to or from the 
number-theoretic-transformed block Fi,j(x, y) of the 

15 original -image block, based on (x, y) to obtain the 
number- theoretic- transformed block Hi,j(x, y) of an 
embedding -applied -image block; 

a step in which the processing section applies inverse 
number theoretic transform to the nvmiber-theoretic-transf ormed 

20 block Hi,3(x, y) to obtain the embedding -applied- image block hi.^Cx, 
y) ; and 

a step in which the processing section obtains the 
embedding -applied- image block hi,j(x, y) for each of all (i, j) 
blocks to obtain an embedding -applied image [h] , and stores it 
25 in the storage section and/or outputs it from an output section 
or an interface. 

19. (Amended) A recording medium having recorded an 
unauthorized-alteration detecting program for making a computer 
30 execute each of the following steps, the following steps 
including : 

a step in which a processing section reads from a storage 
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section, an input section, or an Interface an 
embedding -applied- Image block hi,-j(x, y) obtained by 
block -dividing an embedding -applied Image [h] ; 

a step In which the processing section specifies a modulus 
5 P, an order N which Is an even number equal to or larger than 
2, and a root a, which are parameters of number theoretic 
transform; 

a step In which the processing section applies the number 
theoretic transform to the embedding -applied- Image block hi,j(x, 
10 y) to calculate the number- theoretic- transformed block Hi^^Cx, 
y) of the embedding- applied- Image block; 

a step In which the processing section determines an 
extraction position (x' , y' ) corresponding to an embedding 
position of a signature image according to a predetermined 
15 randomizing function which uses Information of a left adjacent 
block, a right adjacent block, or a surrounding predetermined 
block as a pareimeter; 

a step in which the processing section obtains a remainder 
by dividing the number- theoretic- transformed block Hi,j(x" , y' ) 
20 at the extraction position by embedding strength e to extract 
a pixel value gi,j of the signature image; and 

a step in which the processing section obtains the pixel 
value gi,j of the signature image in each of all (1, j) blocks 
to obtain the signature image [g], and stores it in the storage 
25 section and/or outputs it from a display section, an output 
section, or an interface. 

20. (Amended) A recording medium having recorded an 
unauthorized- alteration detecting program for making a computer 
30 execute an embedding process for embedding a signature image into 
an original image and an extraction process for extracting the 
s Ignat ure image , 
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wherein the embedding process comprises: 
a step In which a processing section specifies a modulus 
P, an order N which is an even number equal to or larger than 

2, and a root a, which are parameters of number theoretic 
5 transform; 

a step in which the processing section reads from a storage 
section an original -image block fi,j(x, y) obtained by 
block -dividing an original image [f ] to which embedding is to 
be applied; 

10 a step in which the processing section uses the modulus 

the order and the root a specified, to apply the number 
theoretic transform to the original -image block fi,-j(x, y) to 
calculate the number- theoretic -transformed block Fi,j(x, y) of 
the original -image block; 

15 a step in which the processing section determines an 

embedding position (x' , y") of a signature image in each block 
according to a predetermined randomizing function which uses 
information of a left adjacent block, a right adjacent block, 
or a surrounding predetermined block as a parameter; 

20 a step in which the processing section reads from the 

storage section a pixel value gi.j of the signature image to be 
embedded; 

a step in which the processing section obtains an integer 
having the minimum absolute value and satisfying Fi,-j(x' , y' ) + 

25 6 = gi.-j (mod e) as embedding amount 6 in each block from the 
number-theoretic-transformed block Fi,j(x" , y' ) of the 
original -image block at the embedding position, the pixel value 
gi.3 of the signature image, and embedding strength e; 

a step in which the processing section adds or subtracts 

30 the embedding amount 6 to or from the 
number- theoretic- transformed block Fi.j(x, y) of the 
original -image block, based on (x, y) to obtain the 
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number- theoretic -transformed block Hi,j(x, y) of an 
embedding- applied- image block; 

a step in which the processing section applies inverse 
number theoretic transform to the niamber- theoretic -transformed 
5 block Hi,j(x, y) to obtain the embedding -applied- image block hi, ^(x, 
y) ; and 

a step in which the processing section obtains the 
embedding -applied- image block hi,-,(x, y) for each of all (i, j) 
blocks to obtain an embedding -applied image [h] , and stores it 
10 in the storage section and/or outputs it from an output section 
or an interface, 
and 

the extraction process comprises : 

a step in which the processing section reads from the 
15 storage section, the input section, or the interface an 
embedding -applied -image block hi,j(x, y) obtained by 
block -dividing an embedding -applied image [h] ; 

a step in which the processing section specifies a modulus 
P, an order N which is an even number equal to or larger than 

20 2, and a root a, which are parameters of number theoretic 
transform; 

a step in which the processing section applies the number 
theoretic transform to the embedding- applied- image block hi.-,(x, 
y) to calculate the number-theoretic-transformed block Hi,j(x, 
25 y) of the embedding-applied-image block; 

a step in which the processing section determines an 
extraction position (x' , y' ) corresponding to an embedding 
position of a signature image according to a predetermined 
randomizing function which uses information of a left adjacent 
30 block, a right adjacent block, or a surrounding predetermined 
block as a parameter; 

a step in which the processing section obtains a remainder 

Art. 34 Amendment 



- 18 - 

by dividing the number- theoretic- transformed block Hi,-j(x' , y' ) 
at the extraction position by embedding strength e to extract 
a pixel value g±,^ of the signature Image; and 

a step In which the processing section obtains the pixel 
value gi,j of the signature Image In each of all (1, 3) blocks 
to obtain the signature Image [gl, and stores It In the storage 
section and/or outputs It from a display section, the output 
section, or the Interface. 
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